Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
File:                     25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json)
Hash identifier:          PUbfZKBm7FVQHXGMLmyBEW900pmo7bD94LO1TTuIKu4=
Subject key identifier:   CE:39:05:9D:55:BA:EF:74:82:6B:AB:E5:C5:49:14:78:B6:3C:7A:26
Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Certificate issuer:       /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Certificate serial:       3317EB8946D29F1B35205C02B88BC2A1BC2DDB4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
Manifest number:          03D1
Signing time:             Wed 08 Apr 2026 10:01:13 +0000
Manifest this update:     Wed 08 Apr 2026 09:56:13 +0000
Manifest next update:     Thu 09 Apr 2026 10:23:13 +0000
Files and hashes:         1: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: HtSVNo2VwQezrWl8f2rm80yFGSuOgotkpvP/IOvnHck=)
                          2: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: Cqs86fNsdJro7WCF739ne4YlNnfz5ExwWYo5fw4REPw=)
                          3: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: Fu7wEATfSK1ET1FmkXXEOADFKlQHr6FL2JqyUkBL8iU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
                          rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:17:eb:89:46:d2:9f:1b:35:20:5c:02:b8:8b:c2:a1:bc:2d:db:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
        Validity
            Not Before: Apr  8 09:56:13 2026 GMT
            Not After : Apr  9 10:23:13 2026 GMT
        Subject: CN=CE39059D55BAEF74826BABE5C5491478B63C7A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:53:8a:03:2b:b5:25:4a:32:13:af:2c:5a:
                    86:a0:ee:5e:6d:43:71:a1:6c:2e:cd:c4:e7:4a:47:
                    22:0d:3b:60:0f:61:cd:eb:cc:eb:08:5e:dd:97:35:
                    41:0b:fe:c9:d5:47:80:eb:87:e5:ee:87:d1:87:4e:
                    f1:29:b1:6b:7e:d0:8b:88:81:1c:f3:fb:24:86:ea:
                    e5:52:65:86:5f:7d:e1:b2:9e:bf:c0:75:85:f8:64:
                    4a:b1:6b:e9:22:e5:0f:7f:cb:df:25:3d:4e:c2:f2:
                    3c:9e:5a:5e:c0:13:f3:60:ac:28:30:cd:a5:92:64:
                    11:06:cf:8e:6a:1a:10:ac:e9:60:cc:ee:45:30:1c:
                    b0:4b:4c:ce:79:25:a1:1c:89:2d:f2:b8:83:2e:fc:
                    2d:d8:54:65:4f:6c:85:2a:e1:c7:89:ca:c3:15:5a:
                    35:de:2e:b8:65:a5:a9:b6:69:af:0c:37:ff:eb:45:
                    c3:60:25:94:89:aa:25:51:49:96:d5:da:fd:4f:87:
                    7e:a6:72:ec:ff:0c:b8:6a:7c:aa:6a:84:57:24:d4:
                    50:dd:a9:1a:8b:5f:17:d8:ac:75:01:d2:81:21:7d:
                    77:49:4d:2d:6b:eb:cb:1c:50:7d:f1:cc:95:82:5a:
                    4f:2a:82:ba:7f:f0:9c:9f:66:11:5b:6d:d8:29:2e:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:39:05:9D:55:BA:EF:74:82:6B:AB:E5:C5:49:14:78:B6:3C:7A:26
            X509v3 Authority Key Identifier:
                keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:31:22:b7:a3:4f:82:cb:49:2e:c3:33:56:8e:65:5e:ec:8e:
         b7:5b:18:54:95:7c:01:e5:72:71:1d:9c:27:1c:ef:a1:ce:d4:
         61:af:9b:7a:9a:ca:7a:17:18:7b:08:df:38:ba:dc:99:48:1d:
         9a:71:57:28:2a:73:c2:3b:1b:07:6c:a5:c4:99:c6:a3:e6:e7:
         ba:47:28:91:af:f3:05:10:de:d3:82:2e:f9:45:e9:2c:15:ac:
         4a:73:e1:35:be:4c:d7:cf:45:4f:3a:2c:9d:62:ec:99:1c:d2:
         42:54:79:60:71:ea:5a:d4:4a:b9:3b:d9:17:00:41:fb:d5:55:
         72:e4:1e:bb:1e:17:4e:78:ef:8c:9a:be:ff:8e:b8:66:5b:1d:
         41:90:65:6c:17:3a:b3:c4:08:62:a6:1c:9a:6b:78:c0:ad:0f:
         15:e1:15:2f:ca:49:62:ff:33:f1:e4:f2:c9:33:64:7d:fa:1a:
         d2:35:7e:ca:60:e8:6d:ea:52:70:0e:2f:83:bc:3b:cd:8c:52:
         83:61:06:ff:0a:ee:41:5c:2f:ee:24:e9:73:65:55:61:aa:97:
         9f:cf:1b:b0:0c:53:09:5a:6c:a1:ab:2d:71:9c:9d:3b:78:73:
         71:ec:f1:7a:95:62:83:1d:07:f2:eb:bf:37:29:64:ee:7d:e0:
         a4:71:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:46:36 2026 by rpki-client